{"id":3340,"date":"2025-09-09T09:24:44","date_gmt":"2025-09-09T07:24:44","guid":{"rendered":"https:\/\/fum-legal.advomatic-dev.de\/?p=3340"},"modified":"2026-02-19T14:36:57","modified_gmt":"2026-02-19T13:36:57","slug":"eu-data-act-ab-dem-12-09-2025-anzuwenden","status":"publish","type":"post","link":"https:\/\/www.fum-legal.de\/en\/aktuelles\/eu-data-act-ab-dem-12-09-2025-anzuwenden\/","title":{"rendered":"EU Data Act to Be Applied from September 12, 2025"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

On\u00a0September 12, 2025<\/strong>\u00a0will the\u00a0EU Data Act<\/strong>\u00a0(Regulation (EU) 2023\/2854) is directly applicable in all EU Member States after a twenty-month transposition period. The regulation already entered into force on 11 January 2024 and forms a key component of the European data strategy. Its aim is to make the use of data in the EU fairer, safer, and more user-friendly \u2013 both in business-to-business (B2B) and business-to-consumer (B2C) transactions, as well as in dealings with public authorities (B2G).<\/p>\n\n

The Data Act regulates in particular the\u00a0Access to and sharing of usage data<\/strong>\u00a0from networked products and related services \u2013 such as IoT devices, smart home technologies, or industrial plants. This affects numerous companies that generate, store, or process data \u2013 regardless of whether they are manufacturers, service providers, or platform providers.<\/p>\n\n

Key Provisions and Obligations for Companies:<\/strong><\/p>\n\n

    \n
  • Access rights to usage data<\/strong>: Users\u2014both individuals and companies\u2014are granted comprehensive rights to access the data they generate. This data must be provided in a structured, commonly used, and machine-readable format.<\/li>\n\n
  • Data Usage Rights:<\/strong>:\u00a0<\/strong>Companies should put in place contractual provisions to safeguard their continued right to use data generated through product use and to protect trade secrets.<\/li>\n\n
  • Data Disclosure Obligations:<\/strong>Companies may be required to disclose certain data to third parties or public authorities upon request, while safeguarding trade secrets and implementing appropriate protective measures.<\/li>\n\n
  • Contract drafting:<\/strong>The Data Act contains guidelines for fair contract drafting regarding data sharing between companies. Unfair contract terms are invalid.<\/li>\n\n
  • Cloud portability<\/strong>: Cloud service providers must make it easier for their customers to transfer their data between different services (data portability). This is designed to prevent vendor lock-in.<\/li>\n<\/ul>\n\n

    What Companies Should Do Now:<\/strong><\/p>\n\n

    The Data Act affects a wide range of economic sectors\u2014from manufacturing to healthcare to e-commerce. Companies should therefore assess at an early stage\u00a0whether and to what extent they are affected by the new regulations<\/strong>, especially if they:<\/p>\n\n

      \n
    • offer connected products or digital services,<\/li>\n\n
    • store customer data or device data,<\/li>\n\n
    • provide or use cloud or edge computing services,<\/li>\n\n
    • exchanging or analyzing data in B2B partnerships.<\/li>\n<\/ul>\n\n

      We recommend reviewing existing data usage processes, contracts, and technical interfaces now to ensure compliance with the Data Act. The effort required to achieve compliance may be considerable, particularly with regard to IT systems, interfaces, and the design of user rights.<\/p>\n\n

      Starting\u00a0September 12, 2026<\/strong>\u00a0, connected products newly placed on the market under the EU Data Act must be designed from the outset in such a way that access to the data they generate is technically possible for the user (\"Access by Design\")\u2014applicable to all products newly placed on the market on or after this date.<\/p>\n\n

      Conclusion:<\/strong>
      The EU Data Act marks a paradigm shift in European data law. Companies are well advised to address the new requirements at an early stage in order to operate in compliance with the law by the effective date of September 12, 2025.<\/p>\n\n

      If you have any questions regarding the implementation of the Data Act or the design of your data strategies in accordance with data protection and IT law, we would be pleased to assist you.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t\t